A command injection vulnerability exists in the web module of the Archer AXE75 router versions v1.6 and v1.0 through 1.3.2 Build 20250107. An authenticated attacker with adjacent-network access can exploit this when the router is configured with sysmode=ap, leading to remote code execution with root privileges. This impacts the confidentiality, integrity, and availability of the device.